General

  • Target

    b4265be68d9ae01b3a801773891dc80b1c9501ff43a9999c3b0a0bfa3b8809a8

  • Size

    2.1MB

  • MD5

    ce4a1572a1c6c4aa5e5731d44f3a1db0

  • SHA1

    8cf9e66744745fad5928ed8406db339e01a75de6

  • SHA256

    b4265be68d9ae01b3a801773891dc80b1c9501ff43a9999c3b0a0bfa3b8809a8

  • SHA512

    1b98807d18ff14b537f34d0697eecb3e88b4f18f2a5f65169cae5c4d7aa1f8b8028f4c5935eec757e702863b7189d27c13b4886d2b41a5288821e316bfe68b88

  • SSDEEP

    49152:VTRjrgdOU9p1PZH/JNTFTJT5dwIwzQJHlJo:1RCBNTBwAHlJo

Score
10/10

Malware Config

Signatures

  • ComRAT v4 (Orchestrator DLL) 1 IoCs

    File contains strings specific to ComRAT v4 samples first seen in 2017.

  • Comrat family

Files

  • b4265be68d9ae01b3a801773891dc80b1c9501ff43a9999c3b0a0bfa3b8809a8
    .dll windows x64

    d9d661a606c9d1c23b47672d1067de68


    Headers

    Imports

    Exports

    Sections